Ansible inaccessible due to Cisco Secure Endpoint antivirus

[Joëlle Boillat]

Good Morning,

At the beginning of December I can't reach a server from a client. This is due to Cisco Secure Endpoint.

So I want to create an exclusion for this specific server.

Can anyone help me on what to exclude from the antivirus to make it work again ?

The first thing I did it's to allow the process 59d3cdc7d51fa34c6b27b8b04ea17992955466eb25022b7bd64880ab35df0bbc but it's always impossible to access to the server. You will find the error here attached.

I have created the following exclusions but it doesn't work :

- IOC : W32.CscriptRemoteSystemScript.ioc

- Process : 59d3cdc7d51fa34c6b27b8b04ea17992955466eb25022b7bd64880ab35df0bbc

- Executable : cscript.exe

Someone could help me please ?

Many thanks in advance for your help.

Kind regards,

Joëlle

[Mike Eggleston]

Modify your inventory list removing the device…?

Mike

Joëlle<AMP_Exclusion_Ansible.PNG><Ansible_Error_Access.png>

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/cefdc2e1-0aa3-4a3e-8c99-609881bab4c6n%40googlegroups.com.
<AMP_Exclusion_Ansible.PNG><Ansible_Error_Access.png>

[Joëlle Boillat]

Hello Mike,

I want that the server will be always protected by Cisco Secure Endpoint.

I need to know what needs to be excluded from the antivirus so that Ansible can continue to work.

Thank you !

Joëlle